State audit red flags Millbrook Central School District’s IT Dept.

MILLBROOK — The Millbrook Central School District (MCSD) was called out by the New York State Comptroller’s Office during a recent audit for several red flags found during the review. It was the result of  an Information Technology (IT) audit released on Aug. 20; the objective was to determine if officials at the MCSD established adequate controls over user accounts in order to prevent unauthorized access, use and loss. 

According to Comptroller Thomas DiNapoli, they did not have adequate controls over user accounts, did not prevent unauthorized access, use or loss and did not periodically review and disable unneeded network user accounts. Additionally, the audit found that the MCSD did not develop a breach notification policy as mandated by New York State law. 

“When we heard they were going to audit us, we looked at it as a good thing,” said President of the Millbrook Board of Education (BOE) Perry Hartswick. “With so many technical challenges from COVID, any extra eyes were a good thing. What they found were important issues, but simple.”

The audit, which was conducted from July 1, 2019 through Nov. 8, 2020, showed the accounts of 46 students no longer enrolled in the district were active, as were the accounts of 13 employees who left their jobs and did not have their accounts disabled from the years 2013-2018. Nine generic accounts were also not disabled for the years 2015-2018.

According to the review, “the user accounts provided access to the district’s network and should have been actively managed to minimize the risk of misuse.” If not, it warned, those accounts could be “potential entry points for attackers to inappropriately access and view Personal, Private or Sensitive Information (PPSI) on the network.” 

The state also advised that districts should have “written procedures in place for granting, changing and revoking user permissions to the network; also, to minimize the risk of unauthorized access, district officials should regularly review enabled network user accounts to ensure they are still needed. Officials must disable unnecessary or unneeded accounts promptly, including user accounts of former employees.”

Recommendations made were for the district “to develop written procedures to manage system access, which will include a periodic review of user access and disabling user accounts when access is no longer needed.” DiNapoli also recommended the development of a breach notification policy.

The MCSD serves not only the village of Millbrook, but the towns of Washington, Union Vale, Clinton, LaGrange, Stanford and Pleasant Valley. Its Board of Education has seven elected board members. 

Superintendent of Schools Laura Mitchell, who began her position in January 2020, did not return multiple requests for an interview but did respond to the audit report on the district’s website, www.millbrookcsd.org. 

“The district is in agreement with these recommendations and is in the process of developing policies and procedures accordingly,” stated Mitchell. “Specifically, the district has already implemented a protocol for regular verification of student enrollment for the specific purposes of maintaining, creating or deactivating students accounts.” 

The district has 944 students and 350 employees, with network user accounts totaling 1,325.

“A parallel process is being developed for staff accounts,” added the superintendent. “The district will also continue working with our local BOCES and cyber security support partners to create an appropriate breach notification policy.”

Some residents took to Facebook to comment on the report, in less than flattering terms. 

“They keep getting money given to that department and the meetings are harder to watch now than when they were on Zoom. The camera and microphone that they have implemented is terrible.” 

Another comment simply said the report was “shocking.”

The MCSD has touted its technology department throughout the years, starting in 2004 through 2007 and again from 2016 through 2019. In April 2020, Elliott Garcia was hired as director of Technology and Data Services. 

Since then the district said it has been making great strides to update both its equipment and its IT practices to protect student and staff accounts. 

Hartswick said that since Garcia was hired he has “devised a plan and executed it, resolving the issues pointed out” in the state audit.

Latest News

Robin Wall Kimmerer urges gratitude, reciprocity in talk at Cary Institute

Robin Wall Kimmerer inspired the audience with her grassroots initiative “Plant, Baby, Plant,” encouraging restoration, native planting and care for ecosystems.

Aly Morrissey

Robin Wall Kimmerer, the bestselling author of “Braiding Sweetgrass” and a member of the Citizen Potawatomi Nation, urged a sold-out audience at the Cary Institute of Ecosystem Studies on Friday, March 13, to rethink humanity’s relationship with the natural world through gratitude, reciprocity and responsibility.

Introduced by Cary Institute President Joshua Ginsberg, Kimmerer opened the evening by greeting the audience in Potawatomi, the native language of her ancestors, and grounding the talk in a practice of gratitude.

Keep ReadingShow less

Melissa Gamwell’s handmade touch

Melissa Gamwell’s handmade touch
Melissa Gamwell, hand lettering with precision and care.
Kevin Greenberg
"There is no better feeling than working through something with your own brain and your own hands." —Melissa Gamwell

In an age of automation, Melissa Gamwell is keeping the human hand alive.

The Cornwall, Connecticut-based calligrapher is practicing an art form that’s been under attack by machines for nearly 400 years, and people are noticing. For proof, look no further than the line leading to her candle-lit table at the Stissing House Craft Feast each winter. In her first year there, she scribed around 1,200 gift tags, cards, and hand drawn ornaments.

Keep ReadingShow less
google preferred source

Want more of our stories on Google? Click here to make us a Preferred Source.

Regional 7 students bring ‘The Addams Family’ to the stage

The cast of “The Addams Family” from Northwest Regional School District No. 7 with Principal Kelly Carroll from Ann Antolini Elementary School in New Hartford.

Monique Jaramillo

Nearly 50 students from across the region are helping bring the delightfully macabre world of “The Addams Family” to life in Northwestern Regional School District No. 7’s upcoming production. The student cast and crew, representing the towns of Barkhamsted, Colebrook, New Hartford and Norfolk, will stage the musical March 27 and 28 at 7 p.m., with a 2 p.m. matinee on March 29 in the school’s auditorium in Winsted.

Based on the iconic characters created by Charles Addams, the musical follows Wednesday Addams, who shocks her famously eccentric family by falling in love with a perfectly “normal” young man. When his parents come to dinner at the Addams’ mansion, two very different families collide, leading to an evening of secrets, surprises and unexpected revelations about love and belonging.

Keep ReadingShow less
‘Quilts of Many Colors’ opens at Hunt Library

Garth Kobel, Art Wall Chair, Mary Randolph, Frank Halden, Ruth Giumarro, Project Chair, Maria Bulson, Barbara Lobdell, Sherry Newman, Elizabeth Frey-Thomas, Donna Heinz around “The Green Man.”

Robin Roraback

In honor of National Quilt Day, a tradition established in 1991, Hunt Library’s second annual quilt show, “Quilts of Many Colors,” will open Saturday, March 21, with a reception from 5 to 7 p.m. The quilts, made by members of the Hunt Library Quilters, will be displayed through April 17. All quilts will be for sale, and a portion of each sale goes to the library.

At the center of the exhibit is a quilt the Hunt Library Quilters collaborated on called the “Quilt of Many Colors,” inspired by Dolly Parton’s song”Coat of Many Colors.” Each member of the Hunt Library Quilters made two to four 10-inch squares for the twin-size quilt, with Gail Allyn embroidering “The Green Man” for the center square. The Green Man, a symbol of rebirth, is also a symbol of the library, seen carved in stone at the library’s entrance. One hundred percent of the sale of this quilt benefits the library.

Keep ReadingShow less
Webutuck students’ films hit the silver screen at filmmaking workshop

Benjamin Sprague, left, Nolan Howard, center, and Holden Slater conduct a Q&A with community members that came to watch their short documentary films after a filmmaking workshop at the Millerton Moviehouse on Thursday, March 12.

Photo by Aly Morrissey

MILLERTON — Students from the Webutuck Central School District screened their five-minute documentaries at The Moviehouse Thursday, March12, showing off their newly acquired skills to an audience of friends, family and community members.

The films — written, directed, shot and edited by the students themselves with guidance from local filmmakers — were the culmination of a two-day student filmmaking bootcamp held earlier this month.

Keep ReadingShow less
google preferred source

Want more of our stories on Google? Click here to make us a Preferred Source.

google preferred source

Want more of our stories on Google? Click here to make us a Preferred Source.